Skip to content

Support EdDSA curves in keymgr import-bind

Conrad Hoffmann requested to merge bitfehler/knot-dns:bitfehler/keymgr-import-eddsa into master

Specifically, the Ed25519 and Ed448 curves (DNSSEC algorithms 15 and 16 respectively).

DISCLAIMER: I am not a cryptographer!

This allowed me to keymgr import-bind keys created with the above-mentioned algorithms. I have not yet used them for anything productive, but keymgr list looks sane and keymgr dnskey gives the same public key as the original BIND file, so I think this is about right?

I wasn't sure if there are any other keymgr sub-commands where such support would also be needed for this to make any sense, if so feel free to point me to the right direction (or wait a few days while I try to roll this out 😉 )

Merge request reports